Compliance Analyst Harrisburg, PA

The Security Awareness and Compliance Analyst administers the organizations Security Awareness and Phishing Program and supports governance risk and compliance initiatives. The employee develops and coordinates security awareness activities manages phishing simulation campaigns analyzes program effectiveness and supports regulatory reporting while contributing to the overall maturity of the GRC program.

Description of Major Duties:
Administers and maintains the enterprise Security Awareness Program.
Plans coordinates and executes phishing simulation campaigns.
Tracks analyzes and reports security awareness and phishing metrics using established reporting tools.
Develops and distributes security awareness communications and educational materials.
Coordinates required cybersecurity awareness training activities across the organization.
Maintains awareness program documentation and records to support compliance and audit requirements.
Assists with preparation of reports supporting regulatory requirements audits and management reviews.
Recommends improvements to awareness activities based on metrics emerging threats and industry best practices.
Assists with governance risk and compliance initiatives as assigned.
Participates in continuous improvement activities supporting the organizations cybersecurity program.
Performs related work as assigned.

Knowledge and Abilities
Information security awareness principles
Cybersecurity fundamentals
Security awareness and phishing simulation platforms
Reporting and data analysis techniques
Compliance and audit support activities

Ability to:
Coordinate multiple projects and training activities
Analyze program metrics and identify trends
Communicate effectively with diverse audiences
Develop user-friendly educational materials
Establish productive working relationships with agency staff